$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096698029873823747/0/323430343a653863303a3a2f33322d3332203d3e20313339303930.roa File: 323430343a653863303a3a2f33322d3332203d3e20313339303930.roa (raw, json) Hash identifier: 5oz//eZO/26udoPVEo7M+cH2yOaR6/BK884dNaQEd/4= Subject key identifier: 78:CE:E9:CC:CB:A0:9B:90:6C:F1:13:92:FC:E8:D2:74:8B:E1:84:FC Certificate issuer: /CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Certificate serial: 01FF9B45E9C9AB12E0983E00F95DB80A702A696E Authority key identifier: 3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/323430343a653863303a3a2f33322d3332203d3e20313339303930.roa Signing time: Wed 22 Jul 2026 01:46:42 +0000 ROA not before: Wed 22 Jul 2026 01:41:42 +0000 ROA not after: Wed 21 Jul 2027 01:46:42 +0000 asID: 139090 IP address blocks: 2404:e8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ff:9b:45:e9:c9:ab:12:e0:98:3e:00:f9:5d:b8:0a:70:2a:69:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3 Validity Not Before: Jul 22 01:41:42 2026 GMT Not After : Jul 21 01:46:42 2027 GMT Subject: CN=78CEE9CCCBA09B906CF11392FCE8D2748BE184FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:5c:a0:4e:a5:70:b0:7e:fe:03:5f:46:79:12: 8b:58:b2:fc:9c:9d:c0:f2:c2:7c:a8:b1:eb:1f:74: d9:ac:cd:33:f0:bf:ec:68:97:f6:29:3c:72:22:47: 83:47:ec:56:a6:95:0f:6b:ee:94:6e:26:a0:2e:63: 59:92:82:40:13:84:63:78:cc:af:bc:f2:c9:79:47: 6a:bd:c4:d1:9c:67:4c:9f:e8:01:9d:6c:66:3d:2e: 2f:bc:7e:5c:84:59:d7:1c:63:b7:5d:83:c9:aa:9b: 77:58:22:52:3f:40:1a:86:2e:97:eb:b2:3f:af:37: ea:4b:37:e7:ef:4a:6e:bc:cd:d2:61:b3:48:50:48: 5c:68:39:46:10:7f:f4:61:6c:38:94:0a:4e:02:ec: f2:c2:02:e8:9e:4a:f7:cc:61:c5:df:c2:bd:49:e2: c7:e7:f6:9f:43:e8:55:f2:a7:bb:a8:a8:17:0b:91: ed:87:0e:58:65:82:14:71:52:36:57:ef:e1:76:e8: d8:ee:50:35:59:81:6e:65:13:60:e6:a6:4d:b1:5b: b8:35:4f:c0:e5:83:e8:a7:3c:d1:11:00:44:dd:ee: 17:20:30:f0:83:d1:b5:8e:01:bf:b7:d1:22:c5:70: 30:5f:85:93:01:a0:ff:dc:41:05:11:98:47:e4:3d: 08:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CE:E9:CC:CB:A0:9B:90:6C:F1:13:92:FC:E8:D2:74:8B:E1:84:FC X509v3 Authority Key Identifier: keyid:3F:3C:60:5D:F6:0C:54:D0:05:05:BC:D8:C0:C6:F7:A3:8B:0A:E3:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3F3C605DF60C54D00505BCD8C0C6F7A38B0AE3D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096698029873823747/0/323430343a653863303a3a2f33322d3332203d3e20313339303930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 61:e4:74:64:ca:3c:30:02:87:ea:fa:b0:6e:29:7d:42:f8:82: a0:4d:04:f4:d7:99:de:08:93:24:a5:28:dd:7a:81:fa:dd:41: 8d:58:ad:ce:f3:ba:20:f9:9c:7c:96:5d:8f:20:d3:45:e5:85: 90:fa:c3:70:37:a4:1f:b7:ab:ac:cf:d7:80:ab:74:2e:0d:e4: 13:24:62:e3:f3:af:d7:e6:47:59:cf:5c:c5:0c:a5:65:b1:e4: c7:90:98:9d:84:23:93:04:be:16:41:7c:09:bc:3b:8f:a2:e9: ef:d8:d9:a6:30:40:55:8f:13:71:5a:53:24:d1:b2:14:c1:78: 1e:e0:6d:54:39:e8:df:c0:c3:b0:1a:4e:6d:08:1e:1f:44:11: 21:13:8d:40:9c:72:c9:2a:66:32:10:ed:33:8f:a5:d8:45:86: 69:82:7e:0d:4f:ab:8e:67:87:36:6f:28:e3:2a:e9:0e:fb:5d: e4:30:fe:d4:57:0c:6f:b9:4b:86:30:ed:2f:c8:b5:f6:97:72: c0:1c:e7:29:77:70:6b:66:9c:8d:b8:31:ea:b6:ef:9d:0e:07: d5:c4:4b:93:f4:e3:32:16:32:89:81:b0:8e:f4:4a:db:86:68: 17:e4:05:f6:b5:bc:54:2e:26:d3:69:8e:9b:14:da:4a:da:80: 5c:0f:8d:d1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUAf+bRenJqxLgmD4A+V24CnAqaW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4 QjBBRTNEMzAeFw0yNjA3MjIwMTQxNDJaFw0yNzA3MjEwMTQ2NDJaMDMxMTAvBgNV BAMTKDc4Q0VFOUNDQ0JBMDlCOTA2Q0YxMTM5MkZDRThEMjc0OEJFMTg0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsXKBOpXCwfv4DX0Z5EotYsvyc ncDywnyosesfdNmszTPwv+xol/YpPHIiR4NH7FamlQ9r7pRuJqAuY1mSgkAThGN4 zK+88sl5R2q9xNGcZ0yf6AGdbGY9Li+8flyEWdccY7ddg8mqm3dYIlI/QBqGLpfr sj+vN+pLN+fvSm68zdJhs0hQSFxoOUYQf/RhbDiUCk4C7PLCAuieSvfMYcXfwr1J 4sfn9p9D6FXyp7uoqBcLke2HDlhlghRxUjZX7+F26NjuUDVZgW5lE2Dmpk2xW7g1 T8Dlg+inPNERAETd7hcgMPCD0bWOAb+30SLFcDBfhZMBoP/cQQURmEfkPQgxAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUeM7pzMugm5Bs8ROS/OjSdIvhhPwwHwYDVR0j BBgwFoAUPzxgXfYMVNAFBbzYwMb3o4sK49MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5ODAyOTg3MzgyMzc0Ny8wLzNGM0M2MDVERjYwQzU0RDAwNTA1QkNEOEMwQzZG N0EzOEIwQUUzRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0YzQzYwNURGNjBDNTREMDA1MDVCQ0Q4QzBDNkY3QTM4QjBBRTNEMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjY5ODAyOTg3MzgyMzc0Ny8wLzMyMzQzMDM0M2E2 NTM4NjMzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzMzOTMwMzkzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQE6MAwDQYJKoZIhvcNAQELBQADggEBAGHkdGTKPDACh+r6sG4pfUL4 gqBNBPTXmd4IkySlKN16gfrdQY1Yrc7zuiD5nHyWXY8g00XlhZD6w3A3pB+3q6zP 14CrdC4N5BMkYuPzr9fmR1nPXMUMpWWx5MeQmJ2EI5MEvhZBfAm8O4+i6e/Y2aYw QFWPE3FaUyTRshTBeB7gbVQ56N/Aw7AaTm0IHh9EESETjUCccskqZjIQ7TOPpdhF hmmCfg1Pq45nhzZvKOMq6Q77XeQw/tRXDG+5S4Yw7S/ItfaXcsAc5yl3cGtmnI24 Meq2750OB9XES5P04zIWMomBsI70StuGaBfkBfa1vFQuJtNpjpsU2kragFwPjdE= -----END CERTIFICATE-----Generated at Fri Jul 24 19:41:54 2026 by rpki-client